Dan Monaghan

Cyber Security @ Aberystwyth University. Views my own, not my employer’s.

[Dan Monaghan @dkmonaghan]

@Bitwarden @FRGus723 Great, thanks! Looking forward to the release!

[Dan Monaghan @dkmonaghan]

@Bitwarden @FRGus723 Could you please clarify when "at the end of this month" is? It's the last day of the month today and I don't see any notice on https://t.co/hfuzL0cmER notifying of a maintenance window?

[SwiftOnSecurity @SwiftOnSecurity]

Your IT admins when they see a new group policy that would make your life worse

[Dan Monaghan @dkmonaghan]

@NVIDIAGeForce @ASUS_ROG #RTX4060

[Dan Monaghan @dkmonaghan]

@TeamYouTube Thank you! Let me know if you need any info via DM. Your support person I spoke to last week did give me a case number, but I didn’t keep track of it. I assumed I’d get a confirmation email but never received anything.

[Dan Monaghan @dkmonaghan]

@ericdaily @TeamYouTube iOS 16.4 and YouTube App 18.13.2, both the latest available. Thanks for replying btw! Sorry for hijacking your thread. Did yours just randomly start working again?

[Dan Monaghan @dkmonaghan]

@TeamYouTube @ericdaily Mine’s still missing. Has been for about 2-3 weeks. Contacted support a week ago who opened an engineering case but haven’t heard anything back. Any ideas? Tried everything.

[Dan Monaghan @dkmonaghan]

@HelloFreshUK I've DM'd you, thanks.

[Dan Monaghan @dkmonaghan]

@HelloFreshUK Could you please provide me with an appropriate email for your IT Security team? I have an urgent incident to report.

[Dan Monaghan @dkmonaghan]

@HelloFreshUK cc @HelloFresh

[Dan Monaghan @dkmonaghan]

@emilycpower Yaaas well done! I’m 4 months nicotine free now, you can do it!

[Matt Smith🏴󠁧󠁢󠁷󠁬󠁳󠁿 @mattccfc02]

fuck me liz kept that quiet

[Dan Monaghan @dkmonaghan]

@emilycpower N then what

[vx-underground @vxunderground]

Modern day cyber security explained

[Dan Monaghan @dkmonaghan]

@Paul_Reviews Great writeup, Paul. Very glad we ran as far as we could from this a few years back. What a shambles.

[Dan Monaghan @dkmonaghan]

@Paul_Reviews @SimonHenshall @OctagonNetworks Hm, how does the use of abs($_GET....) result in code that's vulnerable to XSS? Correct me if I'm wrong, but I don't think you can fit an XSS payload purely inside of numerical float/integer values, which is what abs() will return?

[Dan Monaghan @dkmonaghan]

@Paul_Reviews @SimonHenshall @OctagonNetworks Or in PHP 8, will throw an exception if the input is anything other than an integer or a float.

[Dan Monaghan @dkmonaghan]

@Paul_Reviews @SimonHenshall @OctagonNetworks Are you sure? The use of abs() here will only ever return a float or an int.

[Dan Monaghan @dkmonaghan]

@emilycpower @AledJPhillips Clearly doors, I thought we were friends

[Zeb Palmer @zebpalmer]

Cisco is offering Splunk $20 billion... Unclear if they're trying to buy the company, or just renew their subscription for another year.